Snowflake Rug Pull

Reported loss $468K
Rugpull

What happened

Snowflake finance was rug pulled. An EOA address was able to remove liquidity from the Snowflake pools for a total of 468,000 $USD due to the backdoor functionality in the protocol.

The Snowflake Exchange protocol is a single-side AMM (decentralized exchange) designed for

exchanging stable cryptocurrencies (USDT, USDC, DAI).

All protocols contracts are built using a Proxy upgradability pattern. In that case, the project admin has the ability to change implementation anytime. All project liquidity pools have a privileged caller with the role of "pool". Currently, the pool has unverified implementation and exactly this contract was used for the rug pull.

Protocol details

Classification Exchange (DEX)
Protocol Type Exit Scam/Rugpull
Affected asset / contract SNOW
Protocol links Website @Snowflake_Defi

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.